Privacy

Effective July 23, 2026 · Short, because we collect little.

The early-access list

If you give us your email on this page, we use it for exactly one thing: sending your invite and the messages needed to get your account working. No newsletter, no drip campaign, no selling or sharing of your address, ever. Every email we send tells you how to get off the list, and you can also just reply and say "remove me" - a human reads replies.

If you become a customer

• What we hold: the business records you put into the apps - clients, proposals, time entries, invoices, transactions, and the branding you upload. That data is yours.
• Where it lives: on our servers, encrypted at rest, in a space isolated to your account. Sign-in is handled by Google Firebase Authentication; we never see or store your password.
• Keys you connect (Stripe, Resend) are stored encrypted and used only to act on your behalf at your request. Payments go through your own Stripe account - money never passes through us.
• Deletion: every app has a "Delete my account and data" button. It erases your records, keys, branding, and backups from our servers immediately, no ticket, no waiting period. Trash and backups age out on their own schedules before that.
• We do not sell data, run ads, use tracking pixels, or hand your records to anyone unless the law compels us.

What we log

Ordinary server logs (IP address, request time) for security and abuse prevention, kept briefly. The early-access list records the IP the signup came from, for the same reason.

Third parties we rely on

• Google Firebase - sign-in.
• Cloudflare - the network path between you and our servers.
• Hetzner - the servers themselves.
• Stripe / Resend - only if you connect your own accounts.

Questions or requests

Email [email protected] to ask what we hold about you, get a copy, or have it deleted. You will get an answer from a person.

This policy may be updated as EmberSuite grows; material changes will be announced to account holders by email.